Rafee.me
Hey there 👋CISSP • AWS Solutions Architect Pro

Ishfaque Jahan Rafee

Security Engineer & Enterprise Security Architect

With 9+ years of experience across enterprise cloud security architecture (AWS, Azure, OCI), SecOps & DFIR, and technical pre-sales. Employee #4 at CMiC security team, #2 at Huawei Cloud Solutions team. Currently engineering Unhurried — an intentional, privacy-first career platform.

Let's ConnectView Full CV →Projects & SystemsRead Blog

Featured Project: Unhurried </>

Live AppGitHub Org
Unhurried: Intentional Career Navigation Platform

Unhurried: Intentional Career Navigation Platform

FLAGSHIP

A deliberate, privacy-first career platform built on Google Cloud serverless architecture (5 Go microservices on Cloud Run, 5 API Gateways, React 18 SPA on Firebase Hosting). Replaces AI auto-apply spam with grounded Gemini 3.5 Flash research, strict ≤5 active shortlist gates, envelope-encrypted Google Docs/Calendar integrations, and a non-submitting Chrome MV3 assistant.

Google CloudGo 1.27Cloud RunReact 18Terraform+2
System Architecture Blueprint10 Repositories • 5 Go Services
Google Cloud Platform · Cloud Run · API Gateway · Terraform IaC
01Client Tier • Intentional Interaction
unhurried-web
React 18 + TypeScript SPA • Vite • Firebase Hosting Global CDN (unhurried-careers.com)
unhurried-extension
Chrome Manifest V3 Apply Assistant • ATS Detection (Greenhouse, Lever, Ashby, Workday) • Zero tokens, window.postMessage relay
02Edge & Ingress Tier • 5 Managed API Gateways
Gateway
job-search-gw
300 req/min quota • RS256 token verification
Gateway
applications-gw
300 req/min quota • Pipeline & gates routing
Gateway
resume-gw
300 req/min quota • Resume Studio ingress
Gateway
inbox-gw
300 req/min quota • Calendar sync ingress
Gateway
notifications-gw
300 req/min quota • User alerts ingress
03Compute Tier • Go 1.27 on Cloud Run (Distroless Non-Root, Scale-to-Zero)
Go Service
job-search
Direction & written criteria • Grounded research via Gemini 3.5 Flash • Greenhouse, Lever, Ashby, Adzuna discovery
Go Service
applications
Stage gates (≥30 char rationale) • Strict ≤5 active shortlist ceiling • Outreach Kits • Conversations & rounds
Go Service
resume
Google Docs Workspace (drive.file scope) • Gemini 3.5 Flash tailored resume copy • Cloud KMS token sealing
Go Service
inbox
Google Calendar API (calendar.events.readonly) • KMS decryption • Live interview heuristics (events never stored in Firestore)
Go Service
notifications
Scheduled 07:00 Central scan alerts • Daily job discovery email digests via Resend SMTP relay
04Platform, Data & Security Tier • Serverless & Cryptographically Enforced
Cloud Firestore
Native Mode NoSQL document persistence (us-central1) • Strict caller user-ID scoping (404 on cross-user reads)
Cloud KMS & Secret Mgr
Key Ring: unhurried for envelope encryption of OAuth refresh tokens • Secret Manager for OAuth & SMTP secrets
Vertex AI (Gemini 3.5 Flash)
Grounded research summaries with Google Search citations • Contextual, structured resume tailoring
CI/CD & Provenance
Work flows dev → staging → main • GitHub Actions CI (zero GCP secrets) • Cloud Build + Cloud Deploy (SLSA verified)

Latest Technical Writeups

View All (7) →

Hack The Box - Recollection Solution

•4 min read

Walkthrough and digital forensics analysis for the Hack The Box Recollection Sherlock challenge using Volatility 2 and Volatility 3.

HTBHacktheboxforensicshackingdfir+7

Hack The Box - RogueOne Solution

•5 min read

Incident response and memory forensics walkthrough for the Hack The Box RogueOne Sherlock challenge using Volatility 3.

HTBHacktheboxforensicshackingdfir+4

Does Edmonton Have the Solution to the Canadian Housing Crisis?

•5 min read

Will zoning revision be the silver bullet for Canadian housing affordability?

EdmontonCanadaZoninghousingaffordability

Is Your iPhone Spying on You?

•2 min read

Zero day, zero click exploit on Apple devices

AppleRussiaKaspersky0-day0-click